Month: July 2023

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22021

July 21, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:4.3Exploitability:UnprovenConsequences:Denial of...

Square OkHttp denial of service | CVE-2023-3782

July 21, 2023

NAME__________Square OkHttp denial of servicePlatforms Affected:Square OkHttpRisk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Square OkHttp is vulnerable to a denial of service, caused...

Dell Wyse ThinOS information disclosure | CVE-2023-32446

July 21, 2023

NAME__________Dell Wyse ThinOS information disclosurePlatforms Affected:Dell Wyse ThinOS 9.0 Dell Wyse ThinOS 9.1 Dell Wyse ThinOS 9.1 MR1Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information...

Oracle MySQL Server unspecified | CVE-2023-22057

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

WPAdmin AWS CDN plugin for WordPress cross-site request forgery | CVE-2023-37889

July 21, 2023

NAME__________WPAdmin AWS CDN plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WPAdmin AWS CDN Plugin for WordPress 2.0.13Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________WPAdmin...

Dell Hybrid Client information disclosure | CVE-2023-32476

July 21, 2023

NAME__________Dell Hybrid Client information disclosurePlatforms Affected:Dell Hybrid Client 2.0Risk Level:6.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell Hybrid Client could allow a local authenticated attacker...

Jazz Popups Plugin for WordPress cross-site scripting | CVE-2023-32965

July 21, 2023

NAME__________Jazz Popups Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Jazz Popups Plugin for WordPress 1.8.7Risk Level:7.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Jazz Popups Plugin for...

Oracle MySQL Server unspecified | CVE-2023-22038

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:2.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to the...

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22020

July 21, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access...

Oracle MySQL Server unspecified | CVE-2023-21950

July 21, 2023

Oracle MySQL Server unspecified | CVE-2023-22048

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:3.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to the...

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22027

July 21, 2023

NAME__________Oracle Business Intelligence Enterprise Edition unspecifiedPlatforms Affected:Oracle Business Intelligence Enterprise Edition 7.0.0.0.0Risk Level:4.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Replace Word Plugin for WordPress cross-site request forgery | CVE-2023-37973

July 21, 2023

NAME__________Replace Word Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Better Find and Replace Plugin for WordPress 2.1Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Replace...

Oracle VM VirtualBox unspecified | CVE-2023-22016

July 21, 2023

NAME__________Oracle VM VirtualBox unspecifiedPlatforms Affected:Oracle VM VirtualBox 6.1.16 Oracle VM VirtualBox 7.0.7Risk Level:4.2Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Oracle Hyperion Essbase Administration Services unspecified | CVE-2023-21961

July 21, 2023

NAME__________Oracle Hyperion Essbase Administration Services unspecifiedPlatforms Affected:Oracle Hyperion Essbase Administration Services 21.4.3.0.0Risk Level:6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________An unspecified vulnerability in Oracle Hyperion...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22041

July 21, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle MySQL Server unspecified | CVE-2023-22058

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 8.0.33Risk Level:4.4Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle MySQL Server related to...

Dell Wyse ThinOS information disclosure | CVE-2023-32455

July 21, 2023

PaulPrinting CMS cross-site scripting | CVE-2023-3785

July 21, 2023

NAME__________PaulPrinting CMS cross-site scriptingPlatforms Affected:CodePaul PaulPrinting CMS 2018Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PaulPrinting CMS is vulnerable to cross-site scripting, caused by improper...

Ethyca Fides denial of service | CVE-2023-37480

July 21, 2023

NAME__________Ethyca Fides denial of servicePlatforms Affected:Ethyca Fides 2.15.1Risk Level:2.7Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Ethyca Fides is vulnerable to a denial of service,...

Oracle MySQL Server unspecified | CVE-2023-22007

July 21, 2023

NAME__________Oracle MySQL Server unspecifiedPlatforms Affected:Oracle MySQL Server 5.7.41 Oracle MySQL Server 8.0.32Risk Level:4.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________An unspecified vulnerability in Oracle...

Active Super Shop Manage Details HTML injection |

July 21, 2023

NAME__________Active Super Shop Manage Details HTML injectionPlatforms Affected:Active It Zone Active Super Shop 2.5Risk Level:6.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________Active Super...

PaulPrinting CMS /account/delivery cross-site scripting |

July 21, 2023

NAME__________PaulPrinting CMS /account/delivery cross-site scriptingPlatforms Affected:CodePaul PaulPrinting CMSRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PaulPrinting CMS is vulnerable to cross-site scripting, caused by improper...

aio-libs aiohttp HTTP request smuggling | CVE-2023-37276

July 21, 2023

NAME__________aio-libs aiohttp HTTP request smugglingPlatforms Affected:aio-libs aiohttp 3.8.4Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________aio-libs aiohttp is vulnerable to HTTP request smuggling, caused by...

Month: July 2023

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22021

Square OkHttp denial of service | CVE-2023-3782

Dell Wyse ThinOS information disclosure | CVE-2023-32446

Oracle MySQL Server unspecified | CVE-2023-22057

WPAdmin AWS CDN plugin for WordPress cross-site request forgery | CVE-2023-37889

Dell Hybrid Client information disclosure | CVE-2023-32476

Jazz Popups Plugin for WordPress cross-site scripting | CVE-2023-32965

Oracle MySQL Server unspecified | CVE-2023-22038

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22020

Oracle MySQL Server unspecified | CVE-2023-21950

Oracle MySQL Server unspecified | CVE-2023-22048

Oracle Business Intelligence Enterprise Edition unspecified | CVE-2023-22027

Replace Word Plugin for WordPress cross-site request forgery | CVE-2023-37973

Oracle VM VirtualBox unspecified | CVE-2023-22016

Oracle Hyperion Essbase Administration Services unspecified | CVE-2023-21961

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22041

Oracle MySQL Server unspecified | CVE-2023-22058

Dell Wyse ThinOS information disclosure | CVE-2023-32455

PaulPrinting CMS cross-site scripting | CVE-2023-3785

Ethyca Fides denial of service | CVE-2023-37480

Oracle MySQL Server unspecified | CVE-2023-22007

Active Super Shop Manage Details HTML injection |

PaulPrinting CMS /account/delivery cross-site scripting |

aio-libs aiohttp HTTP request smuggling | CVE-2023-37276

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

You may have missed